This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/9bg312-jpd5dsTESX25J_DZuaqw.roa File: 9bg312-jpd5dsTESX25J_DZuaqw.roa (raw, json) Hash identifier: LAZo3eOOurviFVjV+JoiwFbUPXZpY5hQY2UdXIQci0M= Subject key identifier: F5:B8:37:D7:6F:A3:A5:DE:5D:B1:31:12:5F:6E:49:FC:36:6E:6A:AC Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF16C634AA2E075D715B1E8D29C2798 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/9bg312-jpd5dsTESX25J_DZuaqw.roa Signing time: Fri 02 Jan 2026 18:21:26 +0000 ROA not before: Fri 02 Jan 2026 18:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 91.109.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:6c:63:4a:a2:e0:75:d7:15:b1:e8:d2:9c:27:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5b837d76fa3a5de5db131125f6e49fc366e6aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:b6:1f:a6:19:8c:a2:b3:34:eb:5a:06:08: 0b:90:87:63:6b:98:23:13:50:8e:b9:b3:9d:62:3b: 8b:93:97:8f:b8:f0:3b:8d:85:26:d1:a3:01:d8:ca: ba:9e:fc:2d:79:26:9a:e2:6d:1d:4d:86:a2:46:85: ae:76:01:13:10:fd:a0:b2:25:51:b2:9d:f4:5e:76: bd:7a:84:b9:2b:03:e5:0d:3b:32:b7:f0:03:0c:2c: 83:e3:e7:7b:51:a4:96:90:6d:ea:51:50:b2:fb:24: 17:16:c2:1c:8a:7d:0a:31:9f:d6:1a:ca:24:27:5a: 8c:26:a7:81:93:ee:38:4a:35:ea:33:d6:f6:45:36: e9:d4:6d:98:1b:8b:4d:d5:33:38:83:7d:ba:fe:d5: 26:57:08:59:78:af:5d:07:a5:7d:68:19:9a:14:22: 72:ee:34:18:50:d8:c7:06:00:12:74:a3:60:e5:2b: cf:44:d0:0d:77:87:4b:bd:bc:43:49:e2:cf:cc:60: 83:b8:77:f5:b5:81:84:3b:e7:04:83:e4:cc:8d:bb: a5:70:5d:1a:2c:81:bb:41:b9:04:22:37:2b:54:99: fb:7e:fa:e8:67:38:e6:31:42:f0:55:32:a0:08:aa: 6d:8c:fe:62:e3:99:92:a4:48:86:55:0c:56:b2:14: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B8:37:D7:6F:A3:A5:DE:5D:B1:31:12:5F:6E:49:FC:36:6E:6A:AC X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/9bg312-jpd5dsTESX25J_DZuaqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.45.0/24 Signature Algorithm: sha256WithRSAEncryption 10:ef:9f:c8:43:f6:11:54:ed:87:f1:fd:f3:36:94:63:13:68: a4:a8:f5:ab:1a:9a:de:72:69:0f:57:78:76:ed:e8:f7:c6:6e: f8:86:ce:77:31:28:74:19:02:7e:d8:72:fe:5e:b6:f0:07:da: 38:e1:20:00:0e:b2:0d:fe:9d:38:66:27:39:55:1a:92:54:29: 21:fd:6b:c6:03:1f:7d:f3:39:23:29:de:aa:cf:3f:74:d7:74: 06:db:a7:6c:24:88:6d:e0:25:dd:d4:f7:2a:f8:28:00:a4:98: 5e:22:d9:9f:ed:c8:3a:15:b8:f1:b3:53:cd:1b:43:5d:87:b9: c1:d2:3f:d7:16:f9:fd:8c:76:e6:ca:1d:fb:d4:30:11:2a:63: f2:a1:30:ab:5c:4f:e2:71:9b:27:61:cf:74:da:01:99:32:77: bf:e8:d0:79:3b:70:a9:ef:c2:90:70:4d:64:e0:2d:fd:98:79: 47:9f:3c:32:3f:31:3c:76:6e:3f:f1:b5:32:76:0b:d4:82:96: 7b:40:71:54:92:0f:27:1a:72:f6:c3:9d:ad:97:94:3c:22:c4: d4:a6:f4:7f:b7:17:f9:4a:94:e6:8b:2b:7f:8e:d2:0c:79:d4: 63:86:b2:3f:38:14:84:76:a4:19:5b:65:87:da:a9:96:ef:c5: 09:1f:81:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8WxjSqLgddcVsejSnCeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWI4MzdkNzZmYTNhNWRlNWRiMTMxMTI1ZjZlNDlmYzM2NmU2YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HO2H6YZjKKzNOtaBggLkIdja5gj E1COubOdYjuLk5ePuPA7jYUm0aMB2Mq6nvwteSaa4m0dTYaiRoWudgETEP2gsiVR sp30Xna9eoS5KwPlDTsyt/ADDCyD4+d7UaSWkG3qUVCy+yQXFsIcin0KMZ/WGsok J1qMJqeBk+44SjXqM9b2RTbp1G2YG4tN1TM4g326/tUmVwhZeK9dB6V9aBmaFCJy 7jQYUNjHBgASdKNg5SvPRNANd4dLvbxDSeLPzGCDuHf1tYGEO+cEg+TMjbulcF0a LIG7QbkEIjcrVJn7fvroZzjmMULwVTKgCKptjP5i45mSpEiGVQxWshQ47wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPW4N9dvo6XeXbExEl9uSfw2bmqsMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvOWJnMzEyLWpwZDVkc1RFU1gyNUpfRFp1YXF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW20tMA0G CSqGSIb3DQEBCwUAA4IBAQAQ75/IQ/YRVO2H8f3zNpRjE2ikqPWrGprecmkPV3h2 7ej3xm74hs53MSh0GQJ+2HL+XrbwB9o44SAADrIN/p04Zic5VRqSVCkh/WvGAx99 8zkjKd6qzz9013QG26dsJIht4CXd1Pcq+CgApJheItmf7cg6Fbjxs1PNG0Ndh7nB 0j/XFvn9jHbmyh371DARKmPyoTCrXE/icZsnYc902gGZMne/6NB5O3Cp78KQcE1k 4C39mHlHnzwyPzE8dm4/8bUydgvUgpZ7QHFUkg8nGnL2w52tl5Q8IsTUpvR/txf5 SpTmiyt/jtIMedRjhrI/OBSEdqQZW2WH2qmW78UJH4HH -----END CERTIFICATE-----Generated at Mon Jan 19 14:39:46 2026 by rpki-client